←back to thread

405 points blindgeek | 5 comments | | HN request time: 0s | source
Show context
isodev ◴[] No.42172859[source]
Why are captchas even a thing still? If folks want to scrape something or build an automation around something, then why not let them do it? They still have to respect the system they're logging in. Not to mention the privacy perk of not exposing your visitors to some captcha service with a dozen or more data subprocessors.
replies(7): >>42172909 #>>42172918 #>>42172983 #>>42173046 #>>42173133 #>>42173317 #>>42173643 #
1. dewey ◴[] No.42172909[source]
Captchas are used for many things, and the reason they are still a thing is because they mostly work. Especially fingerprinting invisible captchas.

Try having a login form without a captcha and you'll realize you are capturing 100s of users every day that require you to send out a "please confirm your email address" email for each of them for no good reason.

> They still have to respect the system they're logging in.

Your trust in people is admirable, but in my experience running anything on the internet you'll realize that intentionally or not people will bombard your system until it falls over.

replies(2): >>42173172 #>>42173341 #
2. isodev ◴[] No.42173172[source]
I think folks forget that we can add many of the safeguards a captchas provide as part of whatever "form serving app" is needed without torturing our visitors to prove they can count bicycles.
replies(1): >>42173350 #
3. nraynaud ◴[] No.42173341[source]
they don't work, robots have a higher speed and success rate than humans.
replies(1): >>42173475 #
4. dewey ◴[] No.42173350[source]
I think the times of the "count bicycles" type of captcha are already counted just because of the bad user experience. Now everything is about fingerprinting, as paying to get captchas solved by humans or AI is already used everywhere if it's worth it.
5. dewey ◴[] No.42173475[source]
Not everything is black and white. If it's cutting down 50% of the spam that does not have captcha solving robots because the effort is not worth it, that's already something.

There's a reason many site still have very basic captchas...it's good enough for their use case.